Executive Q&A Panel - ZSCALER INC

Financial Performance:

• Management reaffirmed long-term guidance targeting $8 billion in ARR by Fiscal 31 (base case) with a potential path to $10 billion if AI adoption accelerates faster than expected.
• The $8 billion target implies a Compound Annual Growth Rate (CAGR) of approximately 17%, which aligns with the current fiscal year guidance midpoint.
• Net Retention Rate (NRR) is expected to remain in the mid-teens, supported by strong upselling driven by platform expansion.
• In FY26, the delta between free cash flow and operating cash flow narrowed primarily due to a significant increase in Capital Expenditures related to pricing and supply chain adjustments, alongside timing deviations.
• New logo acquisition is a primary strategic emphasis, leveraging a "hunter" sales model and partner ecosystems to target the 75% of the total addressable market (approx. 15,400 of 20,000 large enterprises) currently unserved.

Guidance and Future Outlook:

• Future growth is driven by three pillars: expanding the platform to cover users, branches, cloud workloads, and agents; penetrating new verticals (public sector, international, sovereign cloud); and aggressive new logo acquisition.
• Management projects the "agent" segment to become the largest revenue driver over time, surpassing the current user-centric model, due to the proliferation of AI agents (estimated at 75 agents per user).
• The $2 billion AI opportunity is viewed as a significant tailwind rather than a discrete product line, representing the momentum AI will generate across the totality of the platform.
• Fiscal 31 targets assume consistent growth in new logos and platform expansion, with no immediate expectation to raise numbers beyond the $8-$10 billion range, though the $10 billion scenario remains active.

Business Segments and Product Lines:

• Zero Trust Everywhere: The strategy focuses on an integrated platform covering Zero Trust User Access (ZUA), Zero Trust Branch (replacing SD-WAN), and Cloud Workload Protection, with a shift toward selling the entire platform rather than siloed components.
• AI Security: Positioned as broader than data security alone, including protection against prompt injection, jailbreaking, and securing AI infrastructure and applications.
• SecOps: Leveraging an "agent-first" approach and "data gravity" (telemetry from endpoint, cloud, and branch) to compete with legacy SecOps vendors; competitors lack this unified data context.
• ZFlex: Being deployed as a core growth enabler to allow customers to ingest the entire security portfolio, though adoption rates of individual SKUs remain low (9 of 30 currently).
• Zero Trust Branch: Demonstrating rapid growth, with customers increasingly willing to replace SD-WAN solutions; new logos often occur when customers bundle Zero Trust for Users and Branches.
• Agentic Exchange: A new product in early availability designed to manage AI agent traffic, though monetization is expected to take time as the market addresses governance concerns.

Market and Competitive Landscape:

• Competitive Differentiation: Management asserts that most competitors in the SASE space still rely on virtual firewalls, VPNs, and SD-WAN, lacking true Zero Trust architecture, which limits their ability to prevent lateral movement.
• Identity Strategy: Zscaler chooses to leverage partner identity providers (Microsoft, AWS, Google, etc.) rather than building a standalone identity platform, citing focus on inline processing and the distraction of entering a non-inline identity market.
• Market Trends: Customers are accelerating the shift from "Secure Service Edge" to "Zero Trust Everywhere" due to AI risks; SD-WAN is increasingly viewed as a security risk due to lateral movement capabilities.
• New Logo Penetration: Significant white space exists in the commercial and SMB sectors, with plans to use simplified "t-shirt size" bundles and partner ecosystems (e.g., Herosoft) to overcome capacity constraints.

Risks and Challenges:

• AI Monetization Uncertainty: While AI is a major tailwind, the specific $2 billion revenue contribution is a projection that depends on the speed of AI adoption and the company's ability to capture value across all platform segments.
• Execution Focus: The primary risk is internal execution; management acknowledges that while the strategy is sound, success depends on accelerating sales velocity and effective go-to-market implementation.
• Market Confusion: The SASE market is crowded and noisy; a challenge exists in educating customers on the fundamental architectural differences between Zscaler and legacy firewall vendors to close transactions.
• Customer Inertia: Transitioning customers from legacy network architectures (SD-WAN, firewalls) to Zero Trust requires overcoming lower-level operational inertia and job security concerns, though leadership buy-in is driving change.

Management Commentary and Tone:

• Tone: Management displayed high confidence, emphasizing "execution" as the primary driver for future results. The tone was bullish, particularly regarding the AI tailwind and the platform's ability to address agentic risks.
• Leadership Changes: Recent changes in the sales organization were characterized as non-macro-driven and unrelated to each other; a strong leadership bench is in place, with the new leader (Ross) focusing on execution of the existing strategy rather than strategic pivots.
• Strategic Focus: The overarching message is that AI is the "largest tailwind" the company has ever seen, and the Zero Trust architecture is the fundamental linchpin for securing the AI era.

Analyst Questions and Answers:

• AI vs. Data Security Distinction: AI security is broader than data security, requiring protection against prompt injections and securing the AI application layer; however, data security remains a foundational pillar for AI security.
• Down-Market Opportunity: Zscaler is targeting the 75% of the market it hasn't reached by leveraging simplified bundles and partner channels, though the core focus remains on enterprise.
• SecOps Competition: Zscaler's "data gravity" and inline agent-first approach provide a distinct advantage over startups or legacy vendors that lack comprehensive telemetry across endpoints, clouds, and branches.
• Identity Ownership: Management decided against building a proprietary identity platform to maintain focus on inline processing and avoid the distraction of a non-inline market, instead leveraging existing identity partners.
• ZFlex Adoption: ZFlex is a growth enabler with no artificial limits, aimed at allowing customers to adopt the full portfolio, though adoption of individual SKUs is a gradual process.
• SD-WAN Replacement: Customers are increasingly willing to drop SD-WAN in favor of Zero Trust Branch due to the security risks associated with SD-WAN's lateral movement capabilities.

Other Key Points:

• AI Gateway: A key product differentiator, allowing Zscaler to control agentic traffic and enforce policies on AI actions before they reach the internet or internal apps.
• Sales Motion Adjustment: The sales organization has recently adjusted product packaging to make it easier to land new customers, focusing on high-level conversation starters before diving into technical details.
• Design Partners: Early indicators for the agentic product (launched in June) show significant customer interest and design partnership engagement.
• Long-Term Vision: The goal is to dominate the massive TAM of Zero Trust Everywhere, treating observability as secondary unless it directly relates to the experience of the Zscaler platform (ZDX).